Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 25.018376] random: crng init done [ 25.019572] random: 7 urandom warning(s) missed due to ratelimiting [ 32.644009] audit: type=1400 audit(1597470257.142:8): avc: denied { execmem } for pid=6045 comm="syz-executor0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 32.652733] IPVS: ftp: loaded support on port[0] = 21 [ 32.703154] tipc: TX() has been purged, node left! [ 69.500519] can: request_module (can-proto-0) failed. [ 69.507552] can: request_module (can-proto-0) failed. [ 69.522364] audit: type=1400 audit(1597470294.016:9): avc: denied { create } for pid=6029 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.15.217' (ECDSA) to the list of known hosts. 2020/08/15 05:45:02 parsed 1 programs 2020/08/15 05:45:03 executed programs: 0 [ 78.984748] audit: type=1400 audit(1597470303.487:10): avc: denied { execmem } for pid=6161 comm="syz-executor3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 79.008272] IPVS: ftp: loaded support on port[0] = 21 [ 79.012975] IPVS: ftp: loaded support on port[0] = 21 [ 79.098909] IPVS: ftp: loaded support on port[0] = 21 [ 79.099447] IPVS: ftp: loaded support on port[0] = 21 [ 79.123864] IPVS: ftp: loaded support on port[0] = 21 [ 79.130420] IPVS: ftp: loaded support on port[0] = 21 [ 79.487892] ip (6850) used greatest stack depth: 11192 bytes left [ 79.504924] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.517961] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.525391] device bridge_slave_0 entered promiscuous mode [ 79.532208] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.539578] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.546515] device bridge_slave_0 entered promiscuous mode [ 79.560024] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.567606] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.576731] device bridge_slave_0 entered promiscuous mode [ 79.583095] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.589747] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.601209] device bridge_slave_1 entered promiscuous mode [ 79.608783] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.615239] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.621763] device bridge_slave_0 entered promiscuous mode [ 79.629226] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.636215] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.642850] device bridge_slave_1 entered promiscuous mode [ 79.649340] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.655749] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.662487] device bridge_slave_1 entered promiscuous mode [ 79.671675] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.679682] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.686882] device bridge_slave_0 entered promiscuous mode [ 79.693227] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.700108] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.707512] device bridge_slave_1 entered promiscuous mode [ 79.718463] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.729067] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.736234] device bridge_slave_1 entered promiscuous mode [ 79.784561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.795950] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.802291] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.810343] device bridge_slave_0 entered promiscuous mode [ 79.817107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.829542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.841070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.850978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.860646] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.867610] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.874551] device bridge_slave_1 entered promiscuous mode [ 79.881147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.893765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.903127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.925552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.938959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.998435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.009152] team0: Port device team_slave_0 added [ 80.017231] team0: Port device team_slave_0 added [ 80.028167] team0: Port device team_slave_0 added [ 80.034322] team0: Port device team_slave_1 added [ 80.041853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.055707] team0: Port device team_slave_0 added [ 80.062501] team0: Port device team_slave_1 added [ 80.070837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.080591] team0: Port device team_slave_1 added [ 80.088324] team0: Port device team_slave_0 added [ 80.095621] team0: Port device team_slave_1 added [ 80.101309] team0: Port device team_slave_1 added [ 80.111263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.120948] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.129001] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.141160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.148975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.160109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.167825] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.177737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.189821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.199597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.209131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.216948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.227932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.236448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.248201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.256505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.272064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.279728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.289705] team0: Port device team_slave_0 added [ 80.297954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.313155] team0: Port device team_slave_1 added [ 80.337684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.356776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.367281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.382181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.396851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.408722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.423339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.500561] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.507101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.514092] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.520509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.534554] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.540975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.547576] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.554059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.572702] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.579180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.585828] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.592246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.607364] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.613722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.620221] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.626597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.641765] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.648133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.654684] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.661002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.704286] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.710723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.717303] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.723632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.278571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.315109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.356753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.365909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.378324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.386152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.393020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.400888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.407907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.427335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.453965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.465346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.476624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.485634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.516261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.526021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.555175] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.580083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.589110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.600032] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.610239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.619266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.649730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.657498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.669618] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.688743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.698205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.717801] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.746785] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.761131] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.415754] netlink: 68 bytes leftover after parsing attributes in process `syz-executor3'. [ 82.933504] netlink: 84 bytes leftover after parsing attributes in process `syz-executor2'. [ 83.026484] netlink: 65 bytes leftover after parsing attributes in process `syz-executor4'. [ 83.050876] netlink: 84 bytes leftover after parsing attributes in process `syz-executor1'. [ 83.406171] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. [ 83.434908] netlink: 332809352 bytes leftover after parsing attributes in process `syz-executor1'. [ 83.448603] netlink: 84 bytes leftover after parsing attributes in process `syz-executor4'. [ 246.870443] INFO: task syz-executor1:9705 blocked for more than 143 seconds. [ 246.877833] Not tainted 5.8.0-syzkaller #0 [ 246.884641] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 246.893428] syz-executor1 D13424 9705 6249 0x00004004 [ 246.899378] Call Trace: [ 246.902425] __schedule+0x3f3/0x890 [ 246.906131] ? __mutex_lock+0x46d/0x9f0 [ 246.910844] ? ctrl_getfamily+0xfa/0x130 [ 246.914911] schedule+0x3b/0xf0 [ 246.918181] schedule_preempt_disabled+0x13/0x20 [ 246.923674] __mutex_lock+0x472/0x9f0 [ 246.927475] ? lock_acquire+0xd0/0x3d0 [ 246.931819] mutex_lock_nested+0x16/0x20 [ 246.935878] ? ctrl_getfamily+0xec/0x130 [ 246.940026] ? mutex_lock_nested+0x16/0x20 [ 246.944987] ctrl_getfamily+0xfa/0x130 [ 246.948873] genl_rcv_msg+0x1d6/0x307 [ 246.953229] ? genl_start+0x160/0x160 [ 246.957144] netlink_rcv_skb+0x4a/0x120 [ 246.961519] genl_rcv+0x23/0x40 [ 246.964903] netlink_unicast+0x1a6/0x270 [ 246.968953] netlink_sendmsg+0x256/0x480 [ 246.973823] sock_sendmsg+0x5e/0x60 [ 246.977633] ____sys_sendmsg+0x1fc/0x270 [ 246.982169] ? copy_msghdr_from_user+0x5b/0x90 [ 246.986759] ___sys_sendmsg+0x77/0xb0 [ 246.990969] ? lock_acquire+0xd0/0x3d0 [ 246.994971] ? expand_files.part.11+0x2c0/0x2c0 [ 246.999629] ? find_held_lock+0x35/0xa0 [ 247.004241] ? __fget_files+0xde/0x1d0 [ 247.008131] ? __fget_files+0xf6/0x1d0 [ 247.012829] ? __fget_light+0x5e/0x70 [ 247.017102] __sys_sendmsg+0x5d/0xb0 [ 247.021439] __x64_sys_sendmsg+0x1a/0x20 [ 247.025596] do_syscall_64+0x37/0x80 [ 247.029330] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 247.035110] RIP: 0033:0x411231 [ 247.038302] Code: Bad RIP value. [ 247.042060] RSP: 002b:00007f60af8479c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 247.050007] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000411231 [ 247.058221] RDX: 0000000000000000 RSI: 00007f60af847a00 RDI: 0000000000000007 [ 247.066570] RBP: 0000000000000007 R08: 00007f60af8479d0 R09: 000000000072bf00 [ 247.075226] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f60af847a40 [ 247.083170] R13: 00000000004cc5b8 R14: 00000000004d9a88 R15: 00000000ffffffff [ 247.090786] INFO: task syz-executor3:9721 blocked for more than 143 seconds. [ 247.098242] Not tainted 5.8.0-syzkaller #0 [ 247.103418] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 247.111962] syz-executor3 D13424 9721 6164 0x00000004 [ 247.117803] Call Trace: [ 247.121008] __schedule+0x3f3/0x890 [ 247.124741] ? __mutex_lock+0x46d/0x9f0 [ 247.129059] ? genl_rcv_msg+0x227/0x307 [ 247.133829] schedule+0x3b/0xf0 [ 247.137224] schedule_preempt_disabled+0x13/0x20 [ 247.143007] __mutex_lock+0x472/0x9f0 [ 247.146989] mutex_lock_nested+0x16/0x20 [ 247.151782] ? mutex_lock_nested+0x16/0x20 [ 247.156021] genl_rcv_msg+0x227/0x307 [ 247.159819] ? lock_acquire+0xd0/0x3d0 [ 247.164253] ? genl_rcv+0x14/0x40 [ 247.167897] ? genl_start+0x160/0x160 [ 247.172200] netlink_rcv_skb+0x4a/0x120 [ 247.176182] genl_rcv+0x23/0x40 [ 247.179553] netlink_unicast+0x1a6/0x270 [ 247.184112] netlink_sendmsg+0x256/0x480 [ 247.188193] sock_sendmsg+0x5e/0x60 [ 247.192542] ____sys_sendmsg+0x1fc/0x270 [ 247.196609] ? copy_msghdr_from_user+0x5b/0x90 [ 247.201751] ___sys_sendmsg+0x77/0xb0 [ 247.205663] ? lock_acquire+0xd0/0x3d0 [ 247.209543] ? expand_files.part.11+0x2c0/0x2c0 [ 247.214740] ? find_held_lock+0x35/0xa0 [ 247.218712] ? __fget_files+0xde/0x1d0 [ 247.223070] ? __fget_files+0xf6/0x1d0 [ 247.226959] ? __fget_light+0x5e/0x70 [ 247.231164] __sys_sendmsg+0x5d/0xb0 [ 247.234996] __x64_sys_sendmsg+0x1a/0x20 [ 247.239152] do_syscall_64+0x37/0x80 [ 247.243566] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 247.248843] RIP: 0033:0x411231 [ 247.252428] Code: Bad RIP value. [ 247.255792] RSP: 002b:00007fbe34fab9c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 247.263926] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000411231 [ 247.272180] RDX: 0000000000000000 RSI: 00007fbe34faba00 RDI: 0000000000000007 [ 247.279545] RBP: 0000000000000007 R08: 00007fbe34fab9d0 R09: 000000000072bf00 [ 247.287256] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fbe34faba40 [ 247.295070] R13: 00000000004cc5b8 R14: 00000000004d9a88 R15: 00000000ffffffff [ 247.303865] INFO: task syz-executor3:9737 blocked for more than 143 seconds. [ 247.311538] Not tainted 5.8.0-syzkaller #0 [ 247.316503] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 247.325094] syz-executor3 D14008 9737 6164 0x00000004 [ 247.331189] Call Trace: [ 247.333926] __schedule+0x3f3/0x890 [ 247.337632] ? __mutex_lock+0x46d/0x9f0 [ 247.342182] ? genl_rcv_msg+0x227/0x307 [ 247.346317] schedule+0x3b/0xf0 [ 247.349595] schedule_preempt_disabled+0x13/0x20 [ 247.355082] __mutex_lock+0x472/0x9f0 [ 247.359159] mutex_lock_nested+0x16/0x20 [ 247.363687] ? mutex_lock_nested+0x16/0x20 [ 247.368006] genl_rcv_msg+0x227/0x307 [ 247.372190] ? lock_acquire+0xd0/0x3d0 [ 247.376247] ? genl_rcv+0x14/0x40 [ 247.379692] ? genl_start+0x160/0x160 [ 247.384227] netlink_rcv_skb+0x4a/0x120 [ 247.388631] genl_rcv+0x23/0x40 [ 247.392481] netlink_unicast+0x1a6/0x270 [ 247.397335] netlink_sendmsg+0x256/0x480 [ 247.402430] sock_sendmsg+0x5e/0x60 [ 247.406167] ____sys_sendmsg+0x1fc/0x270 [ 247.410876] ? copy_msghdr_from_user+0x5b/0x90 [ 247.415556] ___sys_sendmsg+0x77/0xb0 [ 247.419542] ? lock_acquire+0xd0/0x3d0 [ 247.424242] ? expand_files.part.11+0x2c0/0x2c0 [ 247.428919] ? find_held_lock+0x35/0xa0 [ 247.433501] ? __fget_files+0xde/0x1d0 [ 247.437406] ? __fget_files+0xf6/0x1d0 [ 247.441693] ? __fget_light+0x5e/0x70 [ 247.445756] __sys_sendmsg+0x5d/0xb0 [ 247.449775] __x64_sys_sendmsg+0x1a/0x20 [ 247.455277] do_syscall_64+0x37/0x80 [ 247.459003] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 247.464731] RIP: 0033:0x411231 [ 247.467920] Code: Bad RIP value. [ 247.471908] RSP: 002b:00007fbe34f8a9c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 247.480061] RAX: ffffffffffffffda RBX: 00007fbe34f8aa58 RCX: 0000000000411231 [ 247.488162] RDX: 0000000000000000 RSI: 00007fbe34f8aa00 RDI: 0000000000000008 [ 247.495992] RBP: 0000000000000008 R08: 000000000000000b R09: 0000000000000000 [ 247.503849] R10: ffffffffffffffff R11: 0000000000000293 R12: 00007fbe34f8aa40 [ 247.511501] R13: 00000000004cc590 R14: 00000000004d9a70 R15: 00000000ffffffff [ 247.519073] INFO: task syz-executor0:9743 blocked for more than 144 seconds. [ 247.526913] Not tainted 5.8.0-syzkaller #0 [ 247.532513] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 247.541253] syz-executor0 D14008 9743 6219 0x00000004 [ 247.546974] Call Trace: [ 247.549815] __schedule+0x3f3/0x890 [ 247.554192] ? __mutex_lock+0x46d/0x9f0 [ 247.558962] ? genl_rcv_msg+0x227/0x307 [ 247.566357] schedule+0x3b/0xf0 [ 247.569730] schedule_preempt_disabled+0x13/0x20 [ 247.575130] __mutex_lock+0x472/0x9f0 [ 247.579056] mutex_lock_nested+0x16/0x20 [ 247.583645] ? mutex_lock_nested+0x16/0x20 [ 247.587885] genl_rcv_msg+0x227/0x307 [ 247.592445] ? lock_acquire+0xd0/0x3d0 [ 247.596439] ? genl_rcv+0x14/0x40 [ 247.599890] ? genl_start+0x160/0x160 [ 247.604535] netlink_rcv_skb+0x4a/0x120 [ 247.610001] genl_rcv+0x23/0x40 [ 247.614213] netlink_unicast+0x1a6/0x270 [ 247.618797] netlink_sendmsg+0x256/0x480 [ 247.623294] sock_sendmsg+0x5e/0x60 [ 247.627012] ____sys_sendmsg+0x1fc/0x270 [ 247.632033] ? copy_msghdr_from_user+0x5b/0x90 [ 247.636717] ___sys_sendmsg+0x77/0xb0 [ 247.641358] ? lock_acquire+0xd0/0x3d0 [ 247.645423] ? expand_files.part.11+0x2c0/0x2c0 [ 247.650101] ? find_held_lock+0x35/0xa0 [ 247.655042] ? __fget_files+0xde/0x1d0 [ 247.659030] ? __fget_files+0xf6/0x1d0 [ 247.664033] ? __fget_light+0x5e/0x70 [ 247.667840] __sys_sendmsg+0x5d/0xb0 [ 247.672082] __x64_sys_sendmsg+0x1a/0x20 [ 247.676194] do_syscall_64+0x37/0x80 [ 247.679902] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 247.685723] RIP: 0033:0x411231 [ 247.689263] Code: Bad RIP value. [ 247.693038] RSP: 002b:00007f659d2369c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 247.701427] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000411231 [ 247.709222] RDX: 0000000000000000 RSI: 00007f659d236a00 RDI: 0000000000000005 [ 247.717313] RBP: 0000000000000005 R08: 00007f659d2369d0 R09: 000000000072bf00 [ 247.725148] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f659d236a40 [ 247.732791] R13: 00000000004cc5b8 R14: 00000000004d9a88 R15: 00000000ffffffff [ 247.740543] INFO: task syz-executor0:9751 blocked for more than 144 seconds. [ 247.748497] Not tainted 5.8.0-syzkaller #0 [ 247.754091] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 247.762493] syz-executor0 D13600 9751 6219 0x00004004 [ 247.769946] Call Trace: [ 247.773245] __schedule+0x3f3/0x890 [ 247.777071] ? __mutex_lock+0x46d/0x9f0 [ 247.781750] ? genl_rcv_msg+0x227/0x307 [ 247.785836] schedule+0x3b/0xf0 [ 247.789234] schedule_preempt_disabled+0x13/0x20 [ 247.795070] __mutex_lock+0x472/0x9f0 [ 247.798894] mutex_lock_nested+0x16/0x20 [ 247.803427] ? mutex_lock_nested+0x16/0x20 [ 247.807761] genl_rcv_msg+0x227/0x307 [ 247.811914] ? lock_acquire+0xd0/0x3d0 [ 247.815903] ? genl_rcv+0x14/0x40 [ 247.819383] ? genl_start+0x160/0x160 [ 247.823751] netlink_rcv_skb+0x4a/0x120 [ 247.827730] genl_rcv+0x23/0x40 [ 247.831403] netlink_unicast+0x1a6/0x270 [ 247.835613] netlink_sendmsg+0x256/0x480 [ 247.840018] sock_sendmsg+0x5e/0x60 [ 247.844455] ____sys_sendmsg+0x1fc/0x270 [ 247.848517] ? copy_msghdr_from_user+0x5b/0x90 [ 247.853535] ___sys_sendmsg+0x77/0xb0 [ 247.857556] ? lock_acquire+0xd0/0x3d0 [ 247.861864] ? expand_files.part.11+0x2c0/0x2c0 [ 247.866618] ? find_held_lock+0x35/0xa0 [ 247.871079] ? __fget_files+0xde/0x1d0 [ 247.875549] ? __fget_files+0xf6/0x1d0 [ 247.879449] ? __fget_light+0x5e/0x70 [ 247.883811] __sys_sendmsg+0x5d/0xb0 [ 247.887533] __x64_sys_sendmsg+0x1a/0x20 [ 247.892120] do_syscall_64+0x37/0x80 [ 247.896774] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 247.902535] RIP: 0033:0x411231 [ 247.905887] Code: Bad RIP value. [ 247.909332] RSP: 002b:00007f659d2159c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 247.917765] RAX: ffffffffffffffda RBX: 00007f659d215a58 RCX: 0000000000411231 [ 247.926098] RDX: 0000000000000000 RSI: 00007f659d215a00 RDI: 0000000000000006 [ 247.933778] RBP: 0000000000000006 R08: 000000000000000b R09: 0000000000000000 [ 247.941543] R10: ffffffffffffffff R11: 0000000000000293 R12: 00007f659d215a40 [ 247.948819] R13: 00000000004cc590 R14: 00000000004d9a70 R15: 00000000ffffffff [ 247.958855] INFO: task syz-executor0:9755 blocked for more than 144 seconds. [ 247.967585] Not tainted 5.8.0-syzkaller #0 [ 247.972670] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 247.981049] syz-executor0 D14008 9755 6219 0x00004004 [ 247.986777] Call Trace: [ 247.989449] __schedule+0x3f3/0x890 [ 247.993890] ? __mutex_lock+0x46d/0x9f0 [ 247.997864] ? genl_rcv_msg+0x227/0x307 [ 248.002471] schedule+0x3b/0xf0 [ 248.005997] schedule_preempt_disabled+0x13/0x20 [ 248.011636] __mutex_lock+0x472/0x9f0 [ 248.015568] mutex_lock_nested+0x16/0x20 [ 248.019624] ? mutex_lock_nested+0x16/0x20 [ 248.024439] genl_rcv_msg+0x227/0x307 [ 248.028333] ? lock_acquire+0xd0/0x3d0 [ 248.032767] ? genl_rcv+0x14/0x40 [ 248.036222] ? genl_start+0x160/0x160 [ 248.040013] netlink_rcv_skb+0x4a/0x120 [ 248.044531] genl_rcv+0x23/0x40 [ 248.047821] netlink_unicast+0x1a6/0x270 [ 248.052721] netlink_sendmsg+0x256/0x480 [ 248.056974] sock_sendmsg+0x5e/0x60 [ 248.061061] ____sys_sendmsg+0x1fc/0x270 [ 248.065357] ? copy_msghdr_from_user+0x5b/0x90 [ 248.069936] ___sys_sendmsg+0x77/0xb0 [ 248.074304] ? lock_acquire+0xd0/0x3d0 [ 248.078391] ? expand_files.part.11+0x2c0/0x2c0 [ 248.083844] ? find_held_lock+0x35/0xa0 [ 248.087823] ? __fget_files+0xde/0x1d0 [ 248.092072] ? __fget_files+0xf6/0x1d0 [ 248.096108] ? __fget_light+0x5e/0x70 [ 248.100012] __sys_sendmsg+0x5d/0xb0 [ 248.104315] __x64_sys_sendmsg+0x1a/0x20 [ 248.108388] do_syscall_64+0x37/0x80 [ 248.112811] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 248.118486] RIP: 0033:0x411231 [ 248.122296] Code: Bad RIP value. [ 248.125796] RSP: 002b:00007f659d1f49c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 248.133951] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000411231 [ 248.141963] RDX: 0000000000000000 RSI: 00007f659d1f4a00 RDI: 0000000000000009 [ 248.149270] RBP: 0000000000000009 R08: 00007f659d1f49d0 R09: 000000000072c040 [ 248.158384] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f659d1f4a40 [ 248.166712] R13: 00000000004cc5b8 R14: 00000000004d9a88 R15: 00000000ffffffff [ 248.174687] INFO: task syz-executor0:9757 blocked for more than 144 seconds. [ 248.182638] Not tainted 5.8.0-syzkaller #0 [ 248.187478] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 248.196142] syz-executor0 D14008 9757 6219 0x00004004 [ 248.202227] Call Trace: [ 248.204817] __schedule+0x3f3/0x890 [ 248.208580] ? __mutex_lock+0x46d/0x9f0 [ 248.213217] ? genl_rcv_msg+0x227/0x307 [ 248.217319] schedule+0x3b/0xf0 [ 248.221146] schedule_preempt_disabled+0x13/0x20 [ 248.226008] __mutex_lock+0x472/0x9f0 [ 248.230755] mutex_lock_nested+0x16/0x20 [ 248.234960] ? mutex_lock_nested+0x16/0x20 [ 248.239305] genl_rcv_msg+0x227/0x307 [ 248.243617] ? lock_acquire+0xd0/0x3d0 [ 248.247638] ? genl_rcv+0x14/0x40 [ 248.251679] ? genl_start+0x160/0x160 [ 248.255607] netlink_rcv_skb+0x4a/0x120 [ 248.260039] genl_rcv+0x23/0x40 [ 248.263816] netlink_unicast+0x1a6/0x270 [ 248.268358] netlink_sendmsg+0x256/0x480 [ 248.273392] sock_sendmsg+0x5e/0x60 [ 248.277808] ____sys_sendmsg+0x1fc/0x270 [ 248.282295] ? copy_msghdr_from_user+0x5b/0x90 [ 248.286876] ___sys_sendmsg+0x77/0xb0 [ 248.291109] ? lock_acquire+0xd0/0x3d0 [ 248.295116] ? expand_files.part.11+0x2c0/0x2c0 [ 248.300617] ? find_held_lock+0x35/0xa0 [ 248.305023] ? __fget_files+0xde/0x1d0 [ 248.309165] ? __fget_files+0xf6/0x1d0 [ 248.314034] ? __fget_light+0x5e/0x70 [ 248.318182] __sys_sendmsg+0x5d/0xb0 [ 248.322459] __x64_sys_sendmsg+0x1a/0x20 [ 248.326713] do_syscall_64+0x37/0x80 [ 248.330922] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 248.336112] RIP: 0033:0x411231 [ 248.339487] Code: Bad RIP value. [ 248.343520] RSP: 002b:00007f659d1d39c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 248.351966] RAX: ffffffffffffffda RBX: 00007f659d1d3a58 RCX: 0000000000411231 [ 248.359957] RDX: 0000000000000000 RSI: 00007f659d1d3a00 RDI: 000000000000000a [ 248.367784] RBP: 000000000000000a R08: 000000000000000b R09: 0000000000000000 [ 248.375745] R10: ffffffffffffffff R11: 0000000000000293 R12: 00007f659d1d3a40 [ 248.383919] R13: 00000000004cc590 R14: 00000000004d9a70 R15: 00000000ffffffff [ 248.391546] INFO: task syz-executor4:9744 blocked for more than 144 seconds. [ 248.398816] Not tainted 5.8.0-syzkaller #0 [ 248.404108] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 248.414851] syz-executor4 D14008 9744 6163 0x00000004 [ 248.421118] Call Trace: [ 248.424420] __schedule+0x3f3/0x890 [ 248.428043] ? __mutex_lock+0x46d/0x9f0 [ 248.432949] ? genl_rcv_msg+0x227/0x307 [ 248.437014] schedule+0x3b/0xf0 [ 248.441399] schedule_preempt_disabled+0x13/0x20 [ 248.446288] __mutex_lock+0x472/0x9f0 [ 248.452342] mutex_lock_nested+0x16/0x20 [ 248.456515] ? mutex_lock_nested+0x16/0x20 [ 248.461277] genl_rcv_msg+0x227/0x307 [ 248.465369] ? lock_acquire+0xd0/0x3d0 [ 248.469581] ? genl_rcv+0x14/0x40 [ 248.473733] ? genl_start+0x160/0x160 [ 248.477660] netlink_rcv_skb+0x4a/0x120 [ 248.482175] genl_rcv+0x23/0x40 [ 248.485481] netlink_unicast+0x1a6/0x270 [ 248.489622] netlink_sendmsg+0x256/0x480 [ 248.494206] sock_sendmsg+0x5e/0x60 [ 248.497921] ____sys_sendmsg+0x1fc/0x270 [ 248.502344] ? copy_msghdr_from_user+0x5b/0x90 [ 248.507114] ___sys_sendmsg+0x77/0xb0 [ 248.511284] ? lock_acquire+0xd0/0x3d0 [ 248.515264] ? expand_files.part.11+0x2c0/0x2c0 [ 248.519927] ? find_held_lock+0x35/0xa0 [ 248.524880] ? __fget_files+0xde/0x1d0 [ 248.528778] ? __fget_files+0xf6/0x1d0 [ 248.533255] ? __fget_light+0x5e/0x70 [ 248.537085] __sys_sendmsg+0x5d/0xb0 [ 248.541276] __x64_sys_sendmsg+0x1a/0x20 [ 248.545562] do_syscall_64+0x37/0x80 [ 248.549356] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 248.555404] RIP: 0033:0x411231 [ 248.558605] Code: Bad RIP value. [ 248.562357] RSP: 002b:00007f1a209559c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 248.571019] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000411231 [ 248.578411] RDX: 0000000000000000 RSI: 00007f1a20955a00 RDI: 0000000000000005 [ 248.586340] RBP: 0000000000000005 R08: 00007f1a209559d0 R09: 000000000072bf00 [ 248.594363] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f1a20955a40 [ 248.602698] R13: 00000000004cc5b8 R14: 00000000004d9a88 R15: 00000000ffffffff [ 248.610561] INFO: task syz-executor4:9752 blocked for more than 145 seconds. [ 248.617746] Not tainted 5.8.0-syzkaller #0 [ 248.623207] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 248.632151] syz-executor4 D14008 9752 6163 0x00004004 [ 248.638069] Call Trace: [ 248.641142] __schedule+0x3f3/0x890 [ 248.644857] ? __mutex_lock+0x46d/0x9f0 [ 248.649085] ? genl_rcv_msg+0x227/0x307 [ 248.653587] schedule+0x3b/0xf0 [ 248.657038] schedule_preempt_disabled+0x13/0x20 [ 248.662438] __mutex_lock+0x472/0x9f0 [ 248.668370] mutex_lock_nested+0x16/0x20 [ 248.673124] ? mutex_lock_nested+0x16/0x20 [ 248.677477] genl_rcv_msg+0x227/0x307 [ 248.682334] ? lock_acquire+0xd0/0x3d0 [ 248.686398] ? genl_rcv+0x14/0x40 [ 248.689847] ? genl_start+0x160/0x160 [ 248.694473] netlink_rcv_skb+0x4a/0x120 [ 248.698734] genl_rcv+0x23/0x40 [ 248.702877] netlink_unicast+0x1a6/0x270 [ 248.706937] netlink_sendmsg+0x256/0x480 [ 248.711553] sock_sendmsg+0x5e/0x60 [ 248.715396] ____sys_sendmsg+0x1fc/0x270 [ 248.719621] ? copy_msghdr_from_user+0x5b/0x90 [ 248.724969] ___sys_sendmsg+0x77/0xb0 [ 248.729184] ? lock_acquire+0xd0/0x3d0 [ 248.734167] ? expand_files.part.11+0x2c0/0x2c0 [ 248.739015] ? find_held_lock+0x35/0xa0 [ 248.743626] ? __fget_files+0xde/0x1d0 [ 248.747754] ? __fget_files+0xf6/0x1d0 [ 248.752734] ? __fget_light+0x5e/0x70 [ 248.756819] __sys_sendmsg+0x5d/0xb0 [ 248.760934] __x64_sys_sendmsg+0x1a/0x20 [ 248.765184] do_syscall_64+0x37/0x80 [ 248.769931] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 248.775914] RIP: 0033:0x411231 [ 248.779100] Code: Bad RIP value. [ 248.782812] RSP: 002b:00007f1a209349c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 248.791919] RAX: ffffffffffffffda RBX: 00007f1a20934a58 RCX: 0000000000411231 [ 248.799359] RDX: 0000000000000000 RSI: 00007f1a20934a00 RDI: 0000000000000006 [ 248.807197] RBP: 0000000000000006 R08: 000000000000000b R09: 0000000000000000 [ 248.815475] R10: ffffffffffffffff R11: 0000000000000293 R12: 00007f1a20934a40 [ 248.823254] R13: 00000000004cc590 R14: 00000000004d9a70 R15: 00000000ffffffff [ 248.831506] INFO: task syz-executor4:9754 blocked for more than 145 seconds. [ 248.838871] Not tainted 5.8.0-syzkaller #0 [ 248.844732] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 248.853335] syz-executor4 D14008 9754 6163 0x00000004 [ 248.858960] Call Trace: [ 248.862200] __schedule+0x3f3/0x890 [ 248.865912] ? __mutex_lock+0x46d/0x9f0 [ 248.869879] ? genl_rcv_msg+0x227/0x307 [ 248.874534] schedule+0x3b/0xf0 [ 248.877845] schedule_preempt_disabled+0x13/0x20 [ 248.883126] __mutex_lock+0x472/0x9f0 [ 248.887041] mutex_lock_nested+0x16/0x20 [ 248.891455] ? mutex_lock_nested+0x16/0x20 [ 248.895687] genl_rcv_msg+0x227/0x307 [ 248.899567] ? lock_acquire+0xd0/0x3d0 [ 248.903989] ? genl_rcv+0x14/0x40 [ 248.907436] ? genl_start+0x160/0x160 [ 248.911802] netlink_rcv_skb+0x4a/0x120 [ 248.915780] genl_rcv+0x23/0x40 [ 248.919053] netlink_unicast+0x1a6/0x270 [ 248.923835] netlink_sendmsg+0x256/0x480 [ 248.928027] sock_sendmsg+0x5e/0x60 [ 248.932138] ____sys_sendmsg+0x1fc/0x270 [ 248.936328] ? copy_msghdr_from_user+0x5b/0x90 [ 248.941622] ___sys_sendmsg+0x77/0xb0 [ 248.945604] ? lock_acquire+0xd0/0x3d0 [ 248.951153] ? expand_files.part.11+0x2c0/0x2c0 [ 248.956037] ? find_held_lock+0x35/0xa0 [ 248.961228] ? __fget_files+0xde/0x1d0 [ 248.965482] ? __fget_files+0xf6/0x1d0 [ 248.969633] ? __fget_light+0x5e/0x70 [ 248.973974] __sys_sendmsg+0x5d/0xb0 [ 248.977923] __x64_sys_sendmsg+0x1a/0x20 [ 248.982498] do_syscall_64+0x37/0x80 [ 248.986389] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 248.992007] RIP: 0033:0x411231 [ 248.995379] Code: Bad RIP value. [ 248.998757] RSP: 002b:00007f1a209139c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002e [ 249.007311] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000411231 [ 249.014993] RDX: 0000000000000000 RSI: 00007f1a20913a00 RDI: 0000000000000009 [ 249.022654] RBP: 0000000000000009 R08: 00007f1a209139d0 R09: 000000000072c040 [ 249.030521] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f1a20913a40 [ 249.037792] R13: 00000000004cc5b8 R14: 00000000004d9a88 R15: 00000000ffffffff [ 249.046048] [ 249.046048] Showing all locks held in the system: [ 249.053371] 1 lock held by khungtaskd/732: [ 249.057946] #0: ffffffff840e1180 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x23/0x17c [ 249.068340] 1 lock held by in:imklog/5694: [ 249.073216] #0: ffff888216d07cf0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x46/0x50 [ 249.082618] 2 locks held by syz-executor1/9705: [ 249.087434] #0: ffffffff842e7f10 (cb_lock){++++}-{3:3}, at: ctrl_getfamily+0xec/0x130 [ 249.096610] #1: ffffffff842e7fa8 (genl_mutex){+.+.}-{3:3}, at: ctrl_getfamily+0xfa/0x130 [ 249.105818] 2 locks held by syz-executor2/9717: [ 249.111189] 2 locks held by syz-executor3/9721: [ 249.116736] #0: ffffffff842e7f10 (cb_lock){++++}-{3:3}, at: genl_rcv+0x14/0x40 [ 249.125932] #1: ffffffff842e7fa8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x227/0x307 [ 249.135069] 2 locks held by syz-executor3/9737: [ 249.139740] #0: ffffffff842e7f10 (cb_lock){++++}-{3:3}, at: genl_rcv+0x14/0x40 [ 249.148240] #1: ffffffff842e7fa8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x227/0x307 [ 249.156954] 2 locks held by syz-executor0/9743: [ 249.162019] #0: ffffffff842e7f10 (cb_lock){++++}-{3:3}, at: genl_rcv+0x14/0x40 [ 249.169470] #1: ffffffff842e7fa8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x227/0x307 [ 249.178264] 2 locks held by syz-executor0/9751: [ 249.183322] #0: ffffffff842e7f10 (cb_lock){++++}-{3:3}, at: genl_rcv+0x14/0x40 [ 249.191247] #1: ffffffff842e7fa8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x227/0x307 [ 249.199724] 2 locks held by syz-executor0/9755: [ 249.204941] #0: ffffffff842e7f10 (cb_lock){++++}-{3:3}, at: genl_rcv+0x14/0x40 [ 249.212754] #1: ffffffff842e7fa8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x227/0x307 [ 249.221754] 2 locks held by syz-executor0/9757: [ 249.226596] #0: ffffffff842e7f10 (cb_lock){++++}-{3:3}, at: genl_rcv+0x14/0x40 [ 249.235082] #1: ffffffff842e7fa8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x227/0x307 [ 249.243756] 2 locks held by syz-executor4/9744: [ 249.248436] #0: ffffffff842e7f10 (cb_lock){++++}-{3:3}, at: genl_rcv+0x14/0x40 [ 249.257306] #1: ffffffff842e7fa8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x227/0x307 [ 249.266246] 2 locks held by syz-executor4/9752: [ 249.271314] #0: ffffffff842e7f10 (cb_lock){++++}-{3:3}, at: genl_rcv+0x14/0x40 [ 249.278868] #1: ffffffff842e7fa8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x227/0x307 [ 249.287522] 2 locks held by syz-executor4/9754: [ 249.292534] #0: ffffffff842e7f10 (cb_lock){++++}-{3:3}, at: genl_rcv+0x14/0x40 [ 249.300612] #1: ffffffff842e7fa8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x227/0x307 [ 249.308852] 2 locks held by syz-executor4/9758: [ 249.314066] #0: ffffffff842e7f10 (cb_lock){++++}-{3:3}, at: genl_rcv+0x14/0x40 [ 249.321798] #1: ffffffff842e7fa8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x227/0x307 [ 249.330744] 2 locks held by syz-executor5/9748: [ 249.335509] #0: ffffffff842e7f10 (cb_lock){++++}-{3:3}, at: genl_rcv+0x14/0x40 [ 249.343451] #1: ffffffff842e7fa8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x227/0x307 [ 249.353680] 2 locks held by syz-executor5/9753: [ 249.358609] #0: ffffffff842e7f10 (cb_lock){++++}-{3:3}, at: genl_rcv+0x14/0x40 [ 249.366540] #1: ffffffff842e7fa8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x227/0x307 [ 249.375358] 2 locks held by syz-executor5/9756: [ 249.380028] #0: ffffffff842e7f10 (cb_lock){++++}-{3:3}, at: genl_rcv+0x14/0x40 [ 249.387834] #1: ffffffff842e7fa8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x227/0x307 [ 249.396816] 2 locks held by syz-executor5/9761: [ 249.403088] #0: ffffffff842e7f10 (cb_lock){++++}-{3:3}, at: genl_rcv+0x14/0x40 [ 249.411268] #1: ffffffff842e7fa8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x227/0x307 [ 249.419523] [ 249.421554] ============================================= [ 249.421554] [ 249.428805] NMI backtrace for cpu 1 [ 249.432585] CPU: 1 PID: 732 Comm: khungtaskd Not tainted 5.8.0-syzkaller #0 [ 249.439786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.449135] Call Trace: [ 249.451754] dump_stack+0xb9/0xf1 [ 249.455807] nmi_cpu_backtrace.cold.8+0x3e/0x57 [ 249.460609] ? lapic_can_unplug_cpu.cold.33+0x43/0x43 [ 249.465882] nmi_trigger_cpumask_backtrace+0xe0/0xf7 [ 249.470978] arch_trigger_cpumask_backtrace+0x14/0x20 [ 249.476528] watchdog+0x5b1/0x6a0 [ 249.480063] ? hungtask_pm_notify+0x40/0x40 [ 249.484378] kthread+0x162/0x180 [ 249.487735] ? kthread_mod_delayed_work+0xc0/0xc0 [ 249.492654] ret_from_fork+0x22/0x30 [ 249.496451] Sending NMI from CPU 1 to CPUs 0: [ 249.501094] NMI backtrace for cpu 0 [ 249.501095] CPU: 0 PID: 9717 Comm: syz-executor2 Not tainted 5.8.0-syzkaller #0 [ 249.501096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.501097] RIP: 0010:memset_erms+0xb/0x10 [ 249.501098] Code: 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 f3 aa <4c> 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 [ 249.501099] RSP: 0018:ffffc900048235b0 EFLAGS: 00000202 [ 249.501100] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000000 [ 249.501101] RDX: 0000000000000068 RSI: 0000000000000000 RDI: ffffc90004823700 [ 249.501102] RBP: ffffc90004823638 R08: 0000000000000000 R09: ffffc90004823698 [ 249.501103] R10: 000000000000000c R11: e711ce0eb115f5b8 R12: ffffc90004823698 [ 249.501103] R13: ffff8881f6d76018 R14: 000000000000000c R15: 0000000000000000 [ 249.501104] FS: 00007f2968c18700(0000) GS:ffff888218400000(0000) knlGS:0000000000000000 [ 249.501105] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.501106] CR2: 00007fce94b60000 CR3: 00000001f60f8000 CR4: 00000000001506f0 [ 249.501106] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 249.501107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 249.501108] Call Trace: [ 249.501108] ? __nla_validate_parse+0x5a/0x860 [ 249.501109] __nla_parse+0x24/0x26 [ 249.501109] tipc_nl_publ_dump+0x83/0x3f0 [ 249.501110] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 249.501111] __tipc_nl_compat_dumpit.isra.11+0x12c/0x380 [ 249.501111] tipc_nl_compat_sk_dump+0x203/0x2e0 [ 249.501112] ? tipc_nl_sk_dump+0x20/0x20 [ 249.501113] ? tipc_tlv_sprintf+0xe0/0xe0 [ 249.501113] ? __nla_validate_parse+0x5a/0x860 [ 249.501114] ? tipc_sk_fill_sock_diag+0x350/0x350 [ 249.501114] __tipc_nl_compat_dumpit.isra.11+0x1b0/0x380 [ 249.501115] tipc_nl_compat_dumpit+0xa9/0x150 [ 249.501116] tipc_nl_compat_recv+0x1c0/0x570 [ 249.501116] ? tipc_dump_start+0x20/0x20 [ 249.501117] ? __tipc_nl_compat_dumpit.isra.11+0x380/0x380 [ 249.501117] genl_rcv_msg+0x1d6/0x307 [ 249.501118] ? genl_start+0x160/0x160 [ 249.501119] netlink_rcv_skb+0x4a/0x120 [ 249.501119] genl_rcv+0x23/0x40 [ 249.501120] netlink_unicast+0x1a6/0x270 [ 249.501120] netlink_sendmsg+0x256/0x480 [ 249.501121] sock_sendmsg+0x5e/0x60 [ 249.501121] ____sys_sendmsg+0x1fc/0x270 [ 249.501122] ? copy_msghdr_from_user+0x5b/0x90 [ 249.501123] ___sys_sendmsg+0x77/0xb0 [ 249.501123] ? lock_acquire+0xd0/0x3d0 [ 249.501124] ? expand_files.part.11+0x2c0/0x2c0 [ 249.501124] ? find_held_lock+0x35/0xa0 [ 249.501125] ? __fget_files+0xde/0x1d0 [ 249.501126] ? __fget_files+0xf6/0x1d0 [ 249.501126] ? __fget_light+0x5e/0x70 [ 249.501127] __sys_sendmsg+0x5d/0xb0 [ 249.501127] __x64_sys_sendmsg+0x1a/0x20 [ 249.501128] do_syscall_64+0x37/0x80 [ 249.501128] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 249.501129] RIP: 0033:0x457829 [ 249.501130] Code: 7d b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 4b b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 249.501131] RSP: 002b:00007f2968c17c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.501132] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457829 [ 249.501133] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000005 [ 249.501134] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 249.501134] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2968c186d4 [ 249.501135] R13: 00000000004c4291 R14: 00000000004d7178 R15: 00000000ffffffff [ 249.502770] Kernel panic - not syncing: hung_task: blocked tasks [ 249.864722] CPU: 1 PID: 732 Comm: khungtaskd Not tainted 5.8.0-syzkaller #0 [ 249.871906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.882471] Call Trace: [ 249.885278] dump_stack+0xb9/0xf1 [ 249.888748] panic+0x115/0x30c [ 249.892077] watchdog.cold.7+0xbc/0xc3 [ 249.896063] ? hungtask_pm_notify+0x40/0x40 [ 249.900375] kthread+0x162/0x180 [ 249.903869] ? kthread_mod_delayed_work+0xc0/0xc0 [ 249.908778] ret_from_fork+0x22/0x30 [ 249.914541] Kernel Offset: disabled [ 249.918593] Rebooting in 86400 seconds..